Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: zpT4c0E2syOdNufjd2wP53Iim02AwoUvmBRrmtk0slc=
Subject key identifier: 84:A4:D6:4F:AB:EE:84:DA:E6:6B:8A:99:00:CB:50:74:30:4D:6E:D5
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01988E470902DE65D699A4C6C8794620D510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0D70
Signing time: Sat 09 Aug 2025 10:01:16 +0000
Manifest this update: Sat 09 Aug 2025 10:01:16 +0000
Manifest next update: Sun 10 Aug 2025 10:01:16 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: fz7ZswElcVWI/R/eZpbIDXmVH0wZqsH7+ddf0u8lcoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:09:02:de:65:d6:99:a4:c6:c8:79:46:20:d5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Aug 9 10:01:16 2025 GMT
Not After : Aug 10 10:01:16 2025 GMT
Subject: CN=84a4d64fabee84dae66b8a9900cb5074304d6ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:19:ff:65:04:4f:bc:b4:81:0c:52:8a:8a:
cd:c9:28:e7:1d:8f:ff:0d:8e:6b:93:6f:a2:7c:52:
b6:1a:00:01:14:7a:f6:db:c8:9e:94:21:77:3d:da:
ad:73:95:57:ab:c9:10:a7:0f:55:3d:a9:79:3f:6e:
0f:14:a2:16:4b:c2:9a:23:28:a0:27:39:22:33:92:
a8:5b:d2:9b:63:5e:f5:88:bd:e8:73:a0:4f:86:92:
f3:43:4a:00:79:06:01:c0:28:7b:fa:3f:90:d3:f5:
11:a4:50:49:6d:8b:71:74:dd:bb:60:69:b8:ee:e8:
c8:0a:c8:83:86:bf:32:99:7e:3f:f9:23:1c:ae:41:
74:37:6a:36:f9:fc:42:64:ef:c2:be:e2:be:85:00:
bd:25:6a:3d:9b:bb:8a:c1:ad:14:6f:ec:7e:86:2e:
d0:2d:ed:74:40:64:71:fc:b4:03:2b:45:11:ee:06:
0b:4c:92:a3:68:f1:7d:36:d3:51:4f:18:af:a1:bd:
f4:50:2e:15:bd:cb:a5:48:8b:17:75:93:67:51:50:
28:45:d1:94:17:38:af:3d:8e:8b:a2:09:74:ed:77:
a3:d8:0a:dd:53:b3:bb:ca:e0:f9:84:11:96:63:54:
9c:fa:d4:f9:25:8c:16:23:ea:b2:41:4e:34:98:db:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:D6:4F:AB:EE:84:DA:E6:6B:8A:99:00:CB:50:74:30:4D:6E:D5
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:34:8c:5e:e2:fa:96:c9:15:bf:34:83:fc:62:a3:2f:70:
55:9c:0b:6b:8f:f0:28:56:fb:61:a2:c0:60:63:a0:0e:e0:e1:
5a:8b:17:e6:d2:25:fe:21:cb:96:3c:9a:25:b6:3e:b8:b3:0d:
43:94:ef:d6:21:12:35:e5:72:50:da:f5:9a:1f:50:09:0d:80:
6a:de:f1:82:89:c4:f2:39:99:f3:6d:03:bf:37:03:fb:5e:f3:
b2:f6:c1:0f:9b:37:90:e7:02:8b:5a:39:5d:b7:70:bb:e4:9d:
a7:52:6f:e2:a2:13:cf:66:fa:f7:0d:a5:47:4e:7c:0f:cd:ff:
8a:81:4e:93:70:26:db:28:1f:86:53:b8:7f:3c:fc:31:82:7f:
e1:5e:8b:9f:35:b2:80:b3:0a:e8:a8:ab:70:1a:a0:88:fc:1a:
e1:41:c5:e9:a3:19:95:4f:9c:b7:56:97:a3:b0:02:79:94:49:
ec:93:14:e6:c3:d1:bc:4b:bb:57:c4:3f:32:e9:1e:71:3b:0b:
00:f1:f0:23:7d:b8:38:5d:38:22:81:82:cf:b7:8b:5a:a4:79:
96:8b:89:b9:7c:d0:67:e1:ea:dc:22:12:fa:ce:9a:c7:be:80:
3b:02:27:0e:11:40:7a:70:5e:e9:e2:c9:40:50:27:c7:89:95:
3c:cc:cf:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORwkC3mXWmaTGyHlGINUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjUwODA5MTAwMTE2WhcNMjUwODEwMTAwMTE2WjAzMTEwLwYDVQQD
Eyg4NGE0ZDY0ZmFiZWU4NGRhZTY2YjhhOTkwMGNiNTA3NDMwNGQ2ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYZ/2UET7y0gQxSiorNySjnHY//
DY5rk2+ifFK2GgABFHr228ielCF3Pdqtc5VXq8kQpw9VPal5P24PFKIWS8KaIyig
JzkiM5KoW9KbY171iL3oc6BPhpLzQ0oAeQYBwCh7+j+Q0/URpFBJbYtxdN27YGm4
7ujICsiDhr8ymX4/+SMcrkF0N2o2+fxCZO/CvuK+hQC9JWo9m7uKwa0Ub+x+hi7Q
Le10QGRx/LQDK0UR7gYLTJKjaPF9NtNRTxivob30UC4VvculSIsXdZNnUVAoRdGU
FzivPY6Logl07Xej2ArdU7O7yuD5hBGWY1Sc+tT5JYwWI+qyQU40mNsYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISk1k+r7oTa5muKmQDLUHQwTW7VMB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDo0jF7i
+pbJFb80g/xioy9wVZwLa4/wKFb7YaLAYGOgDuDhWosX5tIl/iHLljyaJbY+uLMN
Q5Tv1iESNeVyUNr1mh9QCQ2Aat7xgonE8jmZ820DvzcD+17zsvbBD5s3kOcCi1o5
Xbdwu+Sdp1Jv4qITz2b69w2lR058D83/ioFOk3Am2ygfhlO4fzz8MYJ/4V6LnzWy
gLMK6KircBqgiPwa4UHF6aMZlU+ct1aXo7ACeZRJ7JMU5sPRvEu7V8Q/MukecTsL
APHwI324OF04IoGCz7eLWqR5louJuXzQZ+Hq3CIS+s6ax76AOwInDhFAenBe6eLJ
QFAnx4mVPMzP+w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:07 2025 by rpki-client